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12 FAM 420 
POST SECURITY MANAGEMENT 

(CT:DS-1 65; 08-1 0-201 1 ) 
(Office of Origin: DS/IP) 

12 FAM 421 CHAIN OF COMMAND 

(CT:DS-1 65; 08-1 0-201 1 ) 

a. Overseas, regional security officers (RSOs) report to the chief of mission 
(COM) at Foreign Service posts for the establishment and operation of 
Department security policies and programs abroad. 

b. The RSO or post security officer (PSO) and their staff are subject to the 
administrative direction of the COM or principal officer (PO) in countries 
assigned, or where they are detailed on official temporary duty. 

c. The deputy chief of mission (DCM) is the direct supervisor and designated 
rating officer for the senior RSO at the post. The ambassador is the 
designated reviewing officer for the senior RSO. RSOs rate their 
immediate subordinates and the DCM serves as the reviewing official. At 
constituent posts, RSOs report directly to and are rated by the PO. The 
senior RSO in country is the reviewing officer (see 3 FAH-1 H-2813.3). 

d. While posted overseas, when reporting information to Headquarters, all 
RSOs report to the Director of the Diplomatic Security Service (DS/DSS) 
through the Deputy Assistant Secretary and Assistant Director for 
International Programs (DS/IP). 

12 FAM 422 SECURITY OFFICER 
12 FAM 422.1 General 

(CT-.DS-165; 08-10-2011) 

a. The regional security officer (RSO) is a U.S. Foreign Service security 
officer serving abroad at an embassy, mission (e.g., Geneva and all 
international organization posts), or consulate. RSOs are responsible for 
implementing and managing the Department's security and law 
enforcement programs, other than law enforcement responsibilities under 
the authority of the Office of Inspector General (see 1 FAM 050), for a 
geographic region, which includes at least one Foreign Service post. An 
RSO is resident at a particular post and may have constituent posts within 
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his or her region for which he or she is responsible. RSOs or post 
security officers (PSOs) are responsible for overseeing the day-to-day 
management of security programs at their constituent posts. 

b. The RSO's responsibilities and duties are enumerated in 12 FAM 422.2 
through 12 FAM 422.5. In accordance with 2 FAM 110, the COM may 
reassign some of the specific elements to other post personnel. If a COM 
changes an RSO's duties, the RSO must notify the Office of Regional 
Directors (DS/IP/RD). 

12 FAM 422.2 Security Briefings and Directives 

(CT:DS-165; 08-10-2011) 

a. RSOs and PSOs must provide briefings on specific security regulations, 
procedures, and techniques to all employees at post, in order to maintain 
a high level of employee security awareness. See 12 FAM 424 for types 
of security briefings. 

b. In addition to security briefings, RSOs and PSOs issue, with the approval 
of the COM, security directives that give detailed written instructions or 
reminders of security policies and procedures. Examples of security 
directives include but are not limited to: 



(1) 


Access control; 


(2) 


Mission firearms policy; 


(3) 


Use of deadly force policy; 


(4) 


Travel notification policy; 


(5) 


Emergency preparedness information; 


(6) 


Post policies for handling and securing classified information; or 


(7) 


Contact reporting policy. 



NOTE: Security directives do not take the place of security notices that 
are routinely issued by the RSO and post management to address 
post-specific non-policy issues, such as weekly radio checks, street 
closings and traffic patterns, or temporary changes to access 
control procedures. 

c. Security directives that include prohibitions should describe both the 
prohibited activity and the consequences of a violation (e.g., severe 
disciplinary action up to and including removal from the post). See 3 FAM 
4377, List of Offenses Subject to Disciplinary Action - Foreign Service, 
which identifies the offense of "violations of other security regulations, 
guidelines, or instructions" and penalties ranging from "a letter of 
reprimand to removal." Post security directives must include the 
consequences of violating the mandatory post security policy as it relates 
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to 3 FAM 4377, List of Offenses Subject to Disciplinary Action - Foreign 
Service. 

d. Security directives should highlight the responsibility of all supervisors to 
ensure full compliance. As established in 3 FAM 4127, Personal Security 
Practices, supervisors and managers should ensure that employees have 
access to useful information, Department policies, and guidance 
concerning their personal security responsibilities. They must ensure 
they do not impose working conditions such as strict adherence to arrival 
and departure times that keep employees from maximizing their personal 
security responsibilities. 

e. Security directives must instruct all members of the mission to report any 
known or suspected violations to the RSO or appropriate supervisor. The 
post briefs all current employees concerning their obligation to report any 
known or suspected violations of post security directives to the RSO, their 
supervisors, the deputy chief of mission (DCM), or the COM. The RSO 
includes this statement in his/her briefings for all incoming personnel. 
Both current employees and incoming personnel must acknowledge in 
writing that they have been briefed on their responsibility to report 
violations of post security directives. 

f. Security directives should outline a procedure for seeking exception to the 
directives. The employee must request in writing the written approval of 
the COM for any exceptions to mandatory post security directives. 
Mandatory post security directives must clearly state the policy for 
seeking exceptions. 

g. Security directives should remind all mission personnel of their personal 
security responsibility for their own and others' security. The post must 
ensure all personnel have been briefed and provided a Personal Security 
Self-Assessment Checklist. 

12 FAM 422.3 Reporting 

(CT-.DS-l 65; 08-1 0-201 1 ) 

a. See 12 FAM 425 for RSO reporting requirements to DS/IP/RD. 

b. At all posts without a resident RSO, the PSO must send copies of all 
correspondence relating to the post's security programs to both DS/IP/RD 
and the responsible RSO. 

c. The RSO must report his/her planned or emergency absence from the 
post to DS/IP as soon as possible. 

12 FAM 422.3-1 Reporting Security Incidents 

(CT:DS-1 65; 08-1 0-201 1 ) 
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a. PSOs must immediately report to the responsible RSO and to DS/IP all 
incidents (e.g., actual or possible demonstrations directed at U.S. persons 
or the embassy; planned or actual kidnapping of a U.S. diplomat; Marine 
security guard (MSG) or guard force problems/issues; or other life/facility 
protection issues) that could adversely affect a post's security status. 

b. Security incidents involving the possible or actual compromise of 
classified information (see 12 FAM 550) must be reported within 24 hours 
of discovery to the Program Applications Division (DS/IS/APD): 

(1) Forward Form OF-117, Notice of Security Incident, as it is received 
or initiated, and Form OF-118, Record of Incident, as soon as it is 
fully processed to DS/IS/APD. RSOs must inform DS/IS/APD if the 
Form OF-118 completion date is expected to occur more than 30 
days from the date of the incident. 

(2) E-mail the scanned forms in the portable document format (PDF) to 
DSAPD@state.gov on the OpenNet or to "DSSecInc@state.sgov.gov 
via the C-LAN. Due to privacy and operational security reasons, 
unencrypted transmissions via the Internet are not authorized. 

(3) Cable reporting is no longer acceptable. RSOs should retain the 
original forms at post until the subject of the investigation has 
departed. Do not forward hardcopy documents via Diplomatic 
Pouch to DS/IS/APD. 

c. Cybersecurity incidents (see 12 FAM 590) must be reported within 24 
hours of discovery to the Program Applications Division (DS/IS/APD): 

(1) Forward Form OF-117, Notice of Security Incident, as it is received 
or initiated, and Form OF-118, Record of Incident, as soon as it is 
fully processed to DS/IS/APD. RSOs must inform DS/IS/APD if the 
Form OF-118 completion date is expected to occur more than 30 
days from the date of the incident. 

(2) E-mail the scanned forms in the portable document format (PDF) to 
CSIP@state.gov on the OpenNet. Due to privacy and operational 
security reasons, unencrypted transmissions via the Internet are 
not authorized. 

12 FAM 422.3-2 DS Channels— General Guidance 

(CT:DS-165- 08-10-2011) 

a. DS channel-captioned messages provide control over communications 
between DS and the RSO or PSO on security matters of a highly sensitive 
nature and must be used only for this purpose. The strictest need-to- 
know principle applies to such communications. The need-to-know 
principle does not relieve the security officer of the obligation to keep the 
principal officer, or other responsible officers, informed of matters of 
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official interest relating to personnel or operations of any post under the 
general supervisory jurisdiction of the COM. Since telegram distribution 
is appropriately restricted to the RSOs at the post, sharing such 
information with the COM should, when possible, be personally conveyed 
to preclude disclosure to others (see 5 FAH-2 H-444). 

b. The DS channel is used for telegrams between the Assistant Secretary 
and/or Deputy Assistant Secretaries and Assistant Directors of DS, and 
other appropriate DS personnel, and the responsible DS officer 
concerning criminal investigations involving U.S. citizens or foreign 
nationals who are not U.S. Government employees; special protective 
equipment; and other sensitive subjects that the drafter deems should be 
restricted to DS personnel at posts or within the Department. RSOs must 
ensure that Information Programs Center (IPC) distribution is in 
accordance with 5 FAH-2 H-444. The Executive Director for Diplomatic 
Security (DS/EX) authorizes access to DS channel message traffic at the 
headquarters level. This caption may be used laterally in the field. Use 
ASEC as the only TAGS on this message traffic. The channel for DS very 
sensitive information (DSX) is used for telegrams between the Assistant 
Secretary and/or Deputy Assistant Secretaries and Assistant Directors of 
Diplomatic Security and other appropriate DS personnel, and the 
responsible DS officer concerning criminal and special investigations 
involving U.S. citizens, U.S. Government employees, or DS employees; 
counterintelligence investigations; adverse personnel security actions; 
investigations concerning spouse or child abuse; confidential sources; 
undercover operations; and other sensitive subjects that the drafter 
deems highly restricted. RSOs must ensure that IPC distribution is in 
accordance with 5 FAH-2 H-444. The Director for the office of 
Investigations and Counterintelligence (DS/DO/ICI) authorizes access to 
DSX channel message traffic at the headquarters level. This caption may 
be used laterally in the field. Use ASEC as the only TAGS on this traffic. 

12 FAM 422.4 Other Responsibilities and Duties 

(CT:DS-1 65; 08-1 0-201 1 ) 

The RSO's other responsibilities and duties include, but are not limited to: 

a. Serving as the focal point at the post for programs to protect U.S. 
classified and sensitive information, facilities, and personnel from 
terrorism, weapons of mass destruction, hostile foreign intelligence 
activity, and criminal acts; 

b. Monitoring and inspecting the security programs at constituent 
embassies, missions, or consulates and providing comprehensive training 
and planning guidance to PSOs at these posts through periodic visits and 
exchanges of correspondence; and 



12 FAM 420 Page 5 of 20 



U.S. Department of State Foreign Affairs Manual Volume 12 - Diplomatic Security 



Managing the Regional Security Office, including the supervision of any 
assigned: 

(1) Deputy regional security officers (DRSOs); 

(2) Assistant regional security officers (ARSOs); 

(3) DS special agents (SAs); 

(4) Assistant RSOs for investigations (ARSO-Is); 

(5) Security engineering officers (SEOs); 

(6) Security technical specialists (STSs); 

(7) Security protective specialists (SPSs); 

(8) U.S. Marine security guards (see 12 FAM 430); 

(9) U.S. Navy Seabees; 

(10) Foreign Service national investigators (FSNIs) (see 12 FAM 423.7); 

(11) Local guards (LGs) under personal services contracts (see 12 FAM 
320 and 12 FAH-7- Local Guard Program Handbook); 

(12) Special bodyguards; and 

(13) Office management specialist (OMS) staff. 
Additional duties include: 

(1) Maintaining official liaison with host-country, third-country, and 
U.S. intelligence, security, and law enforcement organizations to 
conduct exchanges of current terrorist, counterintelligence, and 
criminal investigative data and to coordinate post defensive security 
programs or planning; 

(2) Interpreting and reporting information of security significance 
developed through host-country liaison activity; 

(3) Serving as a member of the embassy emergency action committee, 
other pertinent committees, and the country team, providing 
security insights to other members based upon information received 
through foreign liaison and specialized knowledge of security 
policies or programs; 

(4) Establishing and managing, where required, a special security 
program for the personal protection of the COM and other U.S. 
officials targeted by terrorist groups, closely monitoring all available 
intelligence to determine the need for changes in operational 
protective tactics and techniques; 

(5) Arranging and providing protective security coverage, host-country 
security liaison, and other services for U.S. VIP visits and 
conferences within the region; 
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(6) Developing, as the COM or PO may direct, the security portion of 
the post emergency action plan (EAP) to address security issues 
including terrorist attacks, weapons of mass destruction, internal 
defense, riots, coups, and demonstrations; 

(7) Participating in the conduct of bureau training or other programs 
that ensure the effectiveness of the EAP and the efficient utilization 
of post personnel and resources; 

(8) Continually assessing the vulnerability of resident and constituent 
posts to terrorism and hostile foreign intelligence information- 
gathering activities, adjusting the post defensive counterintelligence 
and/or counterterrorist planning and programs; 

(9) Reviewing current and near-term intelligence, Foreign Service 
reporting, and local news reporting on political, military, security, 
and intelligence developments in the region to identify security 
concerns; 

(10) Preparing and coordinating comprehensive threat assessments for 
use by the Department and the post, including revising 
assessments when receiving intelligence information; 

(11) Providing unclassified security threat countermeasure briefings and 
other professional security advice to U.S. business executives and 
other U.S. private citizens at a level of frequency commensurate 
with host-country threat conditions; 

(12) Performing defensive counterintelligence functions and coordinating 
activities involving U.S. officials or LE staff who are targeted by 
hostile intelligence services; 

(13) Maintaining current knowledge of tactics and techniques used 
locally by hostile intelligence services; 

(14) Participating in the post counterintelligence working group (CIWG); 

(15) Conducting, when directed by DS headquarters or the COM, 
investigations of allegations or occurrences involving violations of 
U.S. criminal law or U.S. Government regulations by government 
employees, in accordance with 12 FAM 220; 

(16) Conducting full-field background investigations of all applicants for 
third-country national and LE staff positions within the limits 
imposed by existing liaison agreements with the host government. 
This includes making maximum use of host-country investigative 
records or resources when possible to ensure the fullest 
development of investigative leads and evaluating all information 
developed as a basis for the issuance or denial of a security 
certification for employment (see 3 FAM 7222); 
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(17) Conducting full-field background investigations of all contract 
employees of a U.S. mission, within the limits imposed by existing 
liaison agreements with the host government, and/or reviewing 
investigations conducted by contractors on their employees; 
evaluating all information developed as a basis for the issuance or 
denial of a security certification for employment (see 3 FAM 7222); 

(18) Conducting update investigations on all LE staff and contract 
employees on a 5-year cycle and evaluating the results for the 
purpose of issuing or denying recertification for employment (see 3 
FAM 7222); 

(19) Conducting security surveys of resident and constituent posts to 
include official office buildings and residential areas used by mission 
personnel and, as necessary, recommending major physical 
security changes or improvements revealed by such surveys to the 
COM; coordinating the implementation of all approved and 
proposed projects until completed; and modifying internal defense 
planning concepts as necessary to incorporate improved physical 
security features as they are added; 

(20) Designing, implementing, and managing post's local guard 
programs (see 12 FAM 320); 

(21) Designing, implementing, and managing post's residential security 
program (see 12 FAM 330); 

(22) Providing professional security advice to all personnel of U.S. 
country team elements at the post, whether permanently assigned 
or sent abroad on a temporary duty (TDY) basis, who are under 
COM authority, their accompanying eligible family members (EFMs), 
and members of household (MOHs). In conjunction with 12 FAM 
424.2, the RSO should develop and make available general security 
handout information including, but not limited to: 

(a) RSO contact information; 

(b) Personal protective measures; 

(c) Crime statistics; 

(d) Terrorist threats; 

(e) Traffic accident procedures; 

(f) Safeguarding sensitive and classified material (see 12 FAM 
424.4); and 

(g) Counterintelligence threat and security reporting 
requirements as appropriate and within applicable security 
clearances (see 12 FAM 260 and 12 FAM 270). 

(23) Formulating and conducting education and training programs 



12 FAM 420 Page 8 of 20 



U.S. Department of State Foreign Affairs Manual Volume 12 - Diplomatic Security 

pertinent to the conduct of post information security programs and 
ensuring adherence to Foreign Service and other pertinent U.S. 
Government security regulations; 

(24) Investigating and reporting to DS/IS/APD all instances of possible 
information and cyber security incidents (see 12 FAM 550 and 12 
FAM 590); 

(25) Serving as the mission focal point for the general oversight and 
coordination of special security programs managed by DS offices; 

(26) Coordinating the conduct of technical surveillance countermeasures 
inspections at posts with the Bureau of Diplomatic Security's, Office 
of Security Technology (DS/C/ST), the regional engineering service 
center (ESC), and, if resident, the post SEO; 

(27) Coordinating with the private sector on threats affecting the 
competitiveness of U.S. business and helping to establish and 
manage country councils for the Overseas Security Advisory Council 
(OSAC); 

(28) Providing professional security advice and unclassified security 
threat briefings to administrators of schools that enroll dependents 
of U.S. Government direct-hire employees; 

(29) Where appropriate at the post, serving as the contracting officer's 
representative (COR) for LGs and residential security contracts; 

(30) Designing, implementing, and managing post's surveillance 
detection program (SDP) (see the Surveillance Detection 
Management and Operations Field Guide, Version 2, dated 2002); 

(31) Creating, updating, and distributing appropriate emergency contact 
information to all personnel of U.S. country team elements at the 
post, whether permanently assigned or sent abroad on a TDY basis, 
who are under COM authority; and their accompanying EFMs and 
MOHs. At a minimum, emergency contact information should 
include local police, fire and ambulance, Post One, the RSO, 
Embassy Duty Officer (if available), and embassy operator phone 
numbers. This information should be distributed in a durable and 
convenient method such as a laminated reference card or similar 
method. In addition, in coordination with the General Services 
Office (GSO), the RSO must provide guidance and information on 
immediate actions in case of a vehicular/traffic accident (translated 
where appropriate). This information must also be distributed in a 
durable and convenient method, such as a laminated reference card 
or similar method; and 

(32) Conduct security clearance investigative leads on all employees, 
applicants and contractors at the direction of DS/SI/PSS and within 
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the limits imposed by existing liaison agreements with the host 
government. 

(33) Performing additional duties as directed by a COM or DS. 

12 FAM 422.5 Use of the Polygraph in Vetting 
Locally Employed (LE) Staff at Special Conditions 
Posts 

(CT-.DS-l 65; 08-1 0-201 1 ) 

In order to ensure a full-field background investigation of LE staff, RSOs may 
use the polygraph at posts rated CRITICAL for terrorism on the Security 
Environment Threat List (SETL) and designated Special Conditions Posts (see 
12 FAM 057.3) in cases where such an investigative tool is necessary 
because host country records and/or resources are lacking or are unreliable 
and the threat to life or safety posed by not thoroughly vetting LE staff is 
deemed so great that the Secretary has approved use of the polygraph. 

12 FAM 422.5-1 Application 

(CT:DS-165; 08-10-2011) 

a. RSOs at posts rated CRITICAL for terrorism on the SETL and designated 
Special Conditions Posts (see 12 FAM 057.3) may use the polygraph 
during background investigations of the following categories of LE staff as 
they are defined in 3 FAM 7120: 

• Foreign Service National employees 

• Third Country Nationals employees 

• Personal Service Contract employees 

• Local Hire employees 

Who apply for or, are employed as any of the following post positions: 

• A Foreign Service National Investigator 

• A Driver and/or Motor Pool Dispatcher 

• A translator 

• A Systems Administrator 

• A position requiring the LE Staff be armed. 

b. The RSO at posts rated CRITICAL for terrorism on the SETL and 
designated as a Special Conditions Post (see 12 FAM 057.3) may request 
approval to administer a polygraph examination for other LE staff or LE 
staff positions from DS/ICI/CI after submitting a written request 
certifying that: 
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(1) The COM has approved use of the polygraph; and 

(2) Other avenues of investigation have been exhausted. 

c. The Director of the Diplomatic Security Service and the Under Secretary 
for Management must approve the request before the polygraph can be 
used in an investigation of any staff not listed in 12 FAM 422.4 paragraph 
a. 

12 FAM 422.5-2 Requesting Approval to Use the Polygraph 

(CT-.DS-l 65; 08-1 0-201 1 ) 

A post rated CRITICAL for terrorism on the SETL and designated as having 
special conditions in accordance with 12 FAM 057.3 must direct a request for 
approval to begin administering polygraph examinations to DS/ICI/CI. Use 
of the polygraph for posts not designated as having special conditions and a 
post-specific approval from the Secretary must follow the requirements in 12 
FAM 250. 

12 FAM 422.6 RSO and PSO Systems Security 
Responsibilities 

(CT:DS-165; 08-10-2011) 

a. RSOs and PSOs work closely with the information systems security officer 
(ISSO) at the post (see 12 FAM 613) on systems security issues and have 
specific responsibilities for: 

(1) Ensuring that all personnel with access to a classified system have 
an appropriate security clearance; 

(2) Coordinating briefings with the ISSO for system users upon their 
arrival at the post, concerning the security considerations of 
classified systems; 

(3) Issuing Form OF-117, Notice of Security Incident, for security 
incidents on the system based upon either the RSO's or ISSO's 
investigation; 

(4) Periodically checking alarm systems that protect computer 
equipment to ensure proper functioning; and 

(5) Conducting or verifying the security clearances of local vendor 
personnel who service system components. 

b. Pursuant to their role as the overall manager for security at the post, 
RSOs or PSOs must also provide the ISSO with guidance and/or 
information regarding the: 

(1) Department prohibition on processing classified security information 



12 FAM 420 Page 11 of 20 



U.S. Department of State Foreign Affairs Manual Volume 12 - Diplomatic Security 

on an unclassified system; 

(2) Physical and equipment security measures; 

(3) Security processing for staff and maintenance employees with 
access to an automated information system; 

(4) Identification of a secure storage area for backup copies of system 
data files and software; 

(5) Suspected incidents of fraud or manipulation of data on a system, 
the unauthorized disclosure or the destruction of data, or the 
personal use of system resources; and 

(6) Coordination and monitoring of the conduct of periodic security 
indoctrination and training sessions for personnel assigned to the 
post. 

12 FAM 423 SECURITY PERSONNEL 
12 FAM 423.1 Post Needs 

(CT:DS-165; 08-10-2011) 

a. Posts are encouraged to identify breaks in security personnel staffing that 
may require temporary duty (TDY) coverage. Posts must direct their 
requests for TDY security personnel to the Office of Regional Directors 
within the International Programs Directorate (DS/IP/RD). RSOs must 
notify their respective DS/IP regional director at least two months prior to 
any anticipated absences. 

NOTE: If there is a deputy regional security officer (DRSO), assistant 
regional security officer (ARSO), or Diplomatic Security (DS) Special 
Agent (SA) (see 12 FAM 423.3) resident at the post, DS considers that 
post appropriately covered. 

b. During an RSO's absence from the post due to a permanent change of 
station, home leave, medical evacuation, or annual leave, DS/IP 
considers providing TDY coverage to the post if: 

(1) The post is at the critical or high-threat level in the terrorism and/or 
crime categories, or it is facing a specific threat even though the 
post is not in a high-threat category; 

(2) The request is received with sufficient lead time to permit an 
orderly selection and briefing of the TDY replacement; and 

(3) Sufficient funding for the TDY is available. 

c. DS/IP must notify the Counterintelligence Division (DS/ICI/CI) of breaks 
in security personnel staffing at critical human intelligence threat posts 
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and coordinate requests for TDY support from those posts with DS/ICI/CI 
(see 1 FAM 260). 

12 FAM 423.2 Deputy Regional Security Officer 
(DRSO) 

(CT:DS-1 65; 08-1 0-201 1 ) 

a. For some RSOs at posts, DS/IP/RD may approve (with the concurrence of 
DS/DSS) the establishment of a DRSO position because security is 
accorded exceptional priority status there. The DRSO is a professional 
security officer with prior RSO experience and reports to the RSO. 

b. DRSO responsibilities and duties are similar to those of an RSO. DRSOs 
are usually assigned to posts with a large (three or more) number of DS 
SAs and serve as the rating officers for the DS SAs. 

12 FAM 423.3 DS Special Agent (SA)/Assistant 
Regional Security Officer (ARSO) 

(CT-.DS-l 65; 08-1 0-201 1 ) 

A DS SA/ARSO supports the RSO in managing all elements of the post's 
security programs (all duties and responsibilities identified in 12 FAM 422 - 
Security Officer). The ARSO reports directly to the RSO and the DRSO (if 
such a position is established at the post). The ARSO serves as acting RSO 
only when the RSO is absent from the post. NOTE: If there is a DRSO at 
the post, the DRSO serves as the acting RSO in the absence of the RSO. 

12 FAM 423.4 Assistant Regional Security Officer 
for Investigations (ARSO-I) 

(CT-.DS-l 65; 08-1 0-201 1 ) 

An ARSO-I is responsible for the criminal investigations program at the post 
involving passport and visa fraud. The ARSO-I has specialized consular 
training and law enforcement experience. The ARSO-I works with the 
Consular Section on anti-fraud efforts and criminal investigations of passport 
and visa fraud. The ARSO-I reports to the RSO and the Consul General. 
The ARSO-I also provides routine reporting to the DS Criminal Investigations 
Division (DS/ICI/CR) on their investigative activities. 

12 FAM 423.5 Post Security Officer (PSO) 

(CT:DS-1 65; 08-1 0-201 1 ) 

a. PSOs are U.S. officers whom the COM or PO designates to manage 
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security programs at posts that do not have a resident RSO. PSOs 
assume responsibility for day-to-day security matters. Most tasks 
assigned to PSOs are similar to those assigned to RSOs, but are limited in 
scope because PSOs are not DS officers. 

b. The COM must designate each PSO in writing and send a copy to the RSO 
who has regional responsibility for the post. 

c. Designated PSOs should successfully complete the DS PSO training before 
they are assigned to PSO positions. 

d. PSO duties consist of: 

(1) Administering post security policies and procedures; 

(2) Administering the security incident program; 

(3) Providing arrival and departure briefings to all U.S. employees and 
their dependents; 

(4) Reporting threats and other post security situations to the RSO; 

(5) Conducting investigations as requested and directed by the RSO; 

(6) Conducting investigations of locally employed (LE) staff applicants, 
in accordance with existing liaison agreements with the host 
government, and submitting results to the RSO; 

(7) Supervising the Marine security guard (MSG) detachment 
commander and maintaining control of the MSGs; 

(8) Managing the local guard program and supervising LGs hired under 
personal services contracts; 

(9) Maintaining liaison with host-country officials and post officials; 

(10) Formulating and coordinating emergency plans and conducting 
drills; 

(11) Conducting physical security surveys on proposed new-lease or 
purchased residential and/or official building properties, as directed 
by the RSO; and 

(12) Managing and supervising the post's surveillance detection 
program. 

12 FAM 423.6 RSO Office Management Specialist 
(OMS) 

(CT:DS-165; 08-10-2011) 

U.S. citizen employees may be hired or assigned as RSO Office Management 
Specialists (OMS) at posts where there is a resident RSO. They perform 
many specialized tasks not typically performed by other OMSs and are 
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knowledgeable about security policies and procedures, in addition to having 
secretarial skills. RSO OMSs are also responsible for: 

(1) Typing specialized reports such as the security survey reports, 
investigative reports, security incident reports, and quarterly status 
reports; 

(2) Disseminating threat information and information regarding policy 
changes; and 

(3) Answering questions and resolving minor security problems in the 
RSO's absence. 

12 FAM 423.7 Locally Hired FSN Investigators 
(FSNI) 

(CT:DS-165; 08-10-2011) 

a. FSNIs work in the security office and perform a variety of tasks that 
support the entire security program abroad primarily by: 

(1) Providing expertise concerning the language, culture, and customs 
of the host country; 

(2) Maintaining contacts with police and other host-government 
authorities; 

(3) Obtaining information concerning potential security threats to the 
post; and 

(4) In accordance with 12 FAM 220, conducting investigations as 
assigned by the RSO to include background/security investigations, 
investigations for other department elements, investigations for 
other U.S. Government departments or agencies, and criminal 
investigations abroad. 

b. The RSO or PSO is the FSNI's supervisor. He or she controls the FSNI's 
access to information pertaining to U.S. citizens, and minimizes the use of 
FSNIs in investigations involving U.S. citizens. FSNIs are prohibited from 
accessing the security files of U.S. citizens and their access to the 
investigative files of other FSNs is controlled on a need-to-know basis. 
FSNIs may not interview U.S. sources or review U.S. citizen-controlled 
post files. 

c. RSOs must ensure for all posts under their regional responsibility that all 
prospective FSNIs have successfully completed or will enroll in the 
Diplomatic Security Training Center's (DSTC) Basic Foreign Service 
National Investigator's course before they are employed as FSNIs. 

d. The RSO must ensure that each FSNI enrolls and successfully completes 
DSTC's Advanced FSNI course every five years following his or her initial 
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training. 

12 FAM 424 TYPES OF SECURITY BRIEFINGS 
12 FAM 424.1 New Arrival Briefings 

(CT-.DS-l 65; 08-1 0-201 1 ) 

a. The RSOs or PSOs must provide a mandatory comprehensive security 
briefing to employees shortly after their arrival at the post. The briefing 
must acquaint newly arrived personnel with the post's security situation 
and the total security environment, including the general security 
requirements and procedures in effect. The briefing must also highlight 
the importance of attention to personal security and include a Personal 
Security Self-Assessment Checklist. 

b. Routine arrival briefings must include general counterterrorism and 
counterintelligence policies and procedures relating to the post and 
country of assignment. As threat situations change, RSOs and PSOs must 
provide briefings for senior post officials and other employees and 
dependents. 

c. The RSO or PSO must use an outline at each briefing to ensure that all 
required subjects are covered. The RSO or PSO must maintain a record 
of all briefings, including the dates and identities of all employees briefed, 
and must establish procedures for ensuring employee participation. Each 
employee must sign a statement that he or she has been briefed, has 
received a copy of the checklist, and that he or she understands the 
material covered. The statement must also indicate topics covered during 
the briefing. 

12 FAM 424.2 Spouse and Dependent Briefings 

(CT:DS-1 65; 08-1 0-201 1 ) 

a. The RSO or PSO must make unclassified security briefings available for 
spouses, domestic partners as defined in 3 FAM 1610, and other adult 
dependents of post employees as soon as possible after their arrival at 
the post. Regularly scheduled post orientations may be used for this 
purpose. However, if a post does not have a formal orientation program, 
the security officer should arrange with the post's community liaison 
office (CLO) to establish a dependent briefing program that would include 
all adult dependents. 

b. The CLO can assist in the subsequent dissemination of general security 
information to dependents. The security officer and CLO should jointly 
work out such a mechanism that possibly includes having the security 
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officer participate in scheduled CLO dependent or community briefings. 

c. The briefing must address all threats and dangers to post personnel and 
dependents, and other related issues. The following are suggested topics 
of discussion for such briefings: 

(1) Local criminal activity affecting personal and residential security; 

(2) High-crime areas of the city and country; 

(3) An overview of narcotics available in the country and in the U.S. 
community, as well as local law enforcement and judicial action; 

(4) An unclassified discussion concerning terrorist activity in the 
country directed against the host country, the diplomatic 
community, and U.S. interests; 

(5) An unclassified discussion of the post's emergency action plan (EAP) 
with emphasis on the warden system, actions to take during civil 
disorders, emergency plans for dependent schools, etc.; 

(6) The post's specific environment, notable cultural differences, and 
sensitivity to host-country customs and attitudes; 

(7) Methods by which dependents can obtain information concerning 
the security situation; and 

(8) Emergency telephone numbers including local police, fire 
departments and medical resources, and post security elements. 

12 FAM 424.3 Re-briefing or Refresher Briefing 

(CT:DS-1 65; 08-1 0-201 1 ) 

Security officers must periodically repeat briefings on the security situation 
at certain posts where personnel live under hostile intelligence or terrorist 
threats for long periods. Updating and restating procedural details reduces 
their vulnerability to approach or surveillance. Re-briefing or refresher 
briefings must also highlight the importance of personal security and provide 
employees with a Personal Security Self-Assessment Checklist. 

12 FAM 424.4 Security Incident Program 

(CT:DS-1 65; 08-1 0-201 1 ) 

a. Security officers must brief all employees upon their arrival on the 
safeguarding of classified information. This briefing underscores the 
importance of handling classified material and helps to prevent security 
incidents. National security-cleared local hires, to include interns not 
transiting through Washington DC, must read and sign Form SF-312, 
Classified Information Nondisclosure Agreement, after receiving this 
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briefing and before gaining access to classified information. The RSO or 
PSO must forward a copy of the form to the DS/IS/APD training section. 

b. RSOs and PSOs must also brief each employee who receives a security 
incident report, and sign as a witness to the employee's signature 
acknowledging receipt of the notification packet. The briefing must 
include the reason for the incident report, corrective steps, and the type 
of disciplinary action the employee may receive for further infractions 
(see 12 FAM 557). 

12 FAM 424.5 Special Travel Briefings 

(CT:DS-122; 10-19-2006) 

Special travel briefings cover the counterintelligence regulations pertaining 
to employee travel to critical human intelligence threat posts (see 12 FAM 
264). 

12 FAM 424.6 Departure Debriefings 

(CT:DS-1 65; 08-1 0-201 1 ) 

a. The RSO or PSO is required to have an exit interview with all U.S. citizen 
employees, third-country nationals, and LE staff before their permanent 
departure from the post. The security officer must interview separately 
each departing employee and give him or her opportunity to comment on 
any aspect of the post security program including: 

(1) Any significant contacts with foreign nationals of designated 
countries; 

(2) International travel during their tour of duty; and 

(3) Any security problems encountered. 

b. The RSO or PSO must make a record of the exit interview, including any 
security-related comments received from the employee, and maintain 
such records in the post security office files. 

12 FAM 424.7 Separating Employees 

(CT-.DS-l 65; 08-1 0-201 1 ) 

a. The RSO or PSO must give a security debriefing to personnel who are 
terminating their employment abroad and are not returning to the United 
States, or who will otherwise be separated for a continuous period of 60 
days or more. 

b. The employee must sign Form OF-109, Separation Statement (RET) (see 
12 FAM 564.4), and the security officer must advise him or her of the 
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12 FAM 425 REGIONAL SECURITY OFFICER 
(RSO) REPORTING REQUIREMENTS 

(CT:DS-165; 08-10-2011) 

a. RSOs are responsible for completing and transmitting the following 
reports to DS/IP and other required offices no later than the due date 
listed in the RSO-Security Management Console: 

(1) Annual Overseas Security Advisor Council (OSAC) Crime/Safety 
Report; 

(2) Annual Crime Evaluation Questionnaire (ACEQ) Report; 

(3) Annual Counterintelligence Working Group (CIWG) Meetings and 
Report (Medium and Low); or Bi-Annual CIWG Meeting and Report 
(Critical and High); 

(4) Bi-Annual Security Environment Profile Questionnaire (SEPQ) 
Report; 

(5) Tri-annual Physical Fitness Report; 

(6) Quarterly Physical Fitness Report; 

(7) Quarterly Law Enforcement Availability Pay (LEAP) Report; 

(8) Quarterly Travel Report; 

(9) July 4th Function Security Report; 

(10) Marine Security Guard (MSG) Ball Report; 

(11) Constituent Post Travel Schedule and Fiscal Year Funding 
Estimates; 

(12) Post Security Profile Analysis (PSPA); 

(13) Security Policy and Procedure Checklist (SPPC) - within 60 days of 
arrival; 

(14) Transition Guidelines - before departure; 

(15) Physical Security Survey - every three years; 

(16) Firearms Qualification; 

(17) Constituent Post Trip Report; 

(18) Emergency Drills - medium and low threat posts; or Emergency 
Drills - critical and high threat posts; 

(19) Special Protective Equipment Inventory; 
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(20) Emergency Action Plan Review; and 

(21) Revised Reporting Requirements for DS Special Agent Investigators. 

b. All RSO required reporting must be accomplished on the RSO Security 
Management Console when available. 

12 FAM 426 THROUGH 429 UNASSIGNED 
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